Privacy Policy

Vendora is operated by PT Lux Vendora Retail, registered in Kabupaten Tabanan, Bali 82112, Indonesia. We install and operate curated vending machines in venues across Bali, and we run the checkout that lets customers pay for items from those machines by card or digital wallet. In this policy, “Vendora”, “we”, “our” and “us” refer to PT Lux Vendora Retail.

We only collect what we need to run the service:

• Purchase details. When you buy from a machine we process the items, quantities, price, machine, and venue tied to your order so we can take payment and confirm the machine has dispensed.
• Email address (optional). If you choose to receive a receipt, we use the email you enter at checkout. You can leave it blank.
• Payment information. Card and wallet payments are handled by our payment processor, Midtrans. Your full card number never reaches our servers and we do not store it. We receive only a confirmation of the result and a transaction reference.
• Enquiry details. If you contact us or apply to become a venue partner through luxvendora.com, we collect the name, email, venue name, and message you send.
• Usage data. Like most websites, our servers and analytics record basic technical details such as IP address, browser, device type, and the pages you view.

• To take payment for your purchase and issue refunds.
• To confirm to the machine that payment cleared so your item is dispensed, and to refund you automatically if it cannot.
• To send a receipt or order updates when you ask for them.
• To respond to enquiries and partner applications.
• To detect and prevent fraud, keep the service secure, and meet our legal and accounting obligations.
• To understand and improve how our sites and machines work.

Payments are processed by Midtrans (PT Midtrans), a licensed Indonesian payment gateway. When you pay, Midtrans collects and processes your card or wallet details directly under its own security standards and privacy policy. We share with Midtrans only the order amount, a reference, and your optional email. We never see or keep your full card details.

We do not sell or rent your personal information. We share it only with parties that help us deliver the service, and only as needed:

• Midtrans, to process payments and refunds.
• Our technology providers (for example, hosting, database, and email delivery) who process data on our behalf under confidentiality terms.
• The operator or venue of the machine you bought from, where needed to fulfil and reconcile your order.
• Authorities or advisers, where we are required to by law or to protect our legal rights.

We keep order and transaction records for as long as needed to run the service, support refunds and customer queries, and meet tax and accounting requirements. We keep enquiry details only as long as needed to handle your request. You can ask us to delete information we are not legally required to retain.

Our sites use a small number of cookies and similar technologies to keep the checkout working, remember basic preferences, and measure traffic so we can improve. You can block or delete cookies in your browser settings, though some parts of the site may not work as well.

You can leave the receipt email blank at checkout, unsubscribe from any updates we send, and ask us to access, correct, or delete personal information we hold about you. To make a request, email hello@luxvendora.com and we will respond within a reasonable time.

We use reasonable technical and organisational measures to protect your information, including encryption in transit and limiting access to the people and systems that need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep your data safe.

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Significant changes will be made clear on this page.

If you have any questions about this policy or your information, please get in touch.